EUVD-2023-54066

Malicious code in bioql PyPI...

EUVD-2023-54067

Malicious code in bioql PyPI...

CVE-2023-4187

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CVE-2023-4655

Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1...

WS-2023-0435

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.2.-git...

WS-2023-0432

Logout page does not prevent CSRF in GitHub repository instantsoft/icms2 prior to 2.16.2-git...

WS-2023-0353

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.2-git...

Store XSS in Widgets and pages in instantsoft/icms2

Description I noticed that you filtered the filter very carefully. But there are still some parts you missed Proof of Concept 1 . Login with admin 2 . Go to "http://localhost/o2/admin/menu/itemedit/18" 3 . Insert payload in CSS class 4 . Click save , and go to home page, and Detect store xss in...

CVE-2023-4928

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

Sql injection

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928 SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928 SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928 SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

CVE-2023-4928: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...

PT-2023-31147

Name of the Vulnerable Software and Affected Versions instantsoft/icms2 versions prior to 2.16.1 Description The issue is related to SQL Injection. Recommendations For versions prior to 2.16.1, update to version 2.16.1 or later to resolve the issue...

CVE-2023-4879

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

CVE-2023-4879

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...